diff --git a/hardware/hetzner_ax51-nvme/network.sh b/hardware/hetzner_ax51-nvme/network.sh
index 7fd3051..acbf543 100755
--- a/hardware/hetzner_ax51-nvme/network.sh
+++ b/hardware/hetzner_ax51-nvme/network.sh
@@ -14,26 +14,74 @@ addressv6=$(echo "$addresses" | grep -F 'inet6 ' | perl -pe 's#^.* inet6 ([a-z0-
 
 
 echo "[Match]
-MACAddress=$macaddress
+MACAddress=${macaddress}
+Type=ether
 
 [Network]
-Gateway=$gatewayv4
 Gateway=fe80::1
-Address=116.202.199.132/32
-Address=116.202.199.133/32
-Address=116.202.199.134/32
-Address=116.202.199.143/32
-Address=176.9.141.113/32
-Address=176.9.141.119/32
-Address=176.9.141.124/32
-Address=176.9.141.125/32
-Address=5.9.203.242/32
-Address=5.9.203.246/32
-Address=5.9.203.247/32
+Gateway=${gatewayv4}
+
+[Address]
+Address=${addressv6}::1337/64
 
 [Address]
 Address=${addressv4}/32
 Peer=${gatewayv4}/32
 
-[Address]
-Address=${addressv6}::1337/64" > "/etc/systemd/network/internet.network"
+[Network]
+VLAN=ingress
+VLAN=kubernetes" > "/etc/systemd/network/egress.network"
+
+echo "[NetDev]
+Name=ingress
+Kind=vlan
+MTUBytes=1400
+
+[VLAN]
+Id=4000" > "/etc/systemd/network/ingress.netdev"
+
+echo "[Match]
+Name=ingress
+
+[Network]
+Description=\"ingress\"
+
+[Route]
+Gateway=2a01:4f8:fff0:a5::1
+Table=4000
+
+[Route]
+Gateway=157.90.103.81
+Table=4000
+
+[RoutingPolicyRule]
+From=2a01:4f8:fff0:a5::/64
+Table=4000
+
+[RoutingPolicyRule]
+From=157.90.103.80/28
+Table=4000
+
+[RoutingPolicyRule]
+To=2a01:4f8:fff0:a5::/64
+Table=4000
+
+[RoutingPolicyRule]
+To=157.90.103.80/28
+Table=4000" > "/etc/systemd/network/ingress.network"
+
+echo "[NetDev]
+Name=kubernetes
+Kind=vlan
+MTUBytes=1400
+
+[VLAN]
+Id=4010" > "/etc/systemd/network/kubernetes.netdev"
+
+echo "[Match]
+Name=kubernetes
+
+[Network]
+Description=\"kubernetes\"
+Address=10.73.19.fixme/24
+Address=fdad:73ce:19db::100/48" > "/etc/systemd/network/kubernetes.network"